Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/356552-312a-44ce-8677-405505fc460e/1/TkB_fq2BapVV9HrxCQPvRcgXC4I.mft
File:                     TkB_fq2BapVV9HrxCQPvRcgXC4I.mft (raw, json)
Hash identifier:          t78G9O/ar6KBHTtqDqgaMC3agYgv3N1szs/mQGjBL+M=
Subject key identifier:   7A:E7:FA:AE:4F:AF:1A:D0:75:1C:23:2F:59:6A:31:49:89:B0:3C:93
Authority key identifier: 4E:40:7F:7E:AD:81:6A:95:55:F4:7A:F1:09:03:EF:45:C8:17:0B:82
Certificate issuer:       /CN=4e407f7ead816a9555f47af10903ef45c8170b82
Certificate serial:       019CAC46FD1C1004CBC31F58F9B9174382BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TkB_fq2BapVV9HrxCQPvRcgXC4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/356552-312a-44ce-8677-405505fc460e/1/TkB_fq2BapVV9HrxCQPvRcgXC4I.mft
Manifest number:          092B
Signing time:             Mon 02 Mar 2026 02:00:59 +0000
Manifest this update:     Mon 02 Mar 2026 02:00:59 +0000
Manifest next update:     Tue 03 Mar 2026 02:00:59 +0000
Files and hashes:         1: TkB_fq2BapVV9HrxCQPvRcgXC4I.crl (hash: eeTFRTKa7KnAyujti6q5SvaPft+mZiceyPWxohOpVp8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/356552-312a-44ce-8677-405505fc460e/1/TkB_fq2BapVV9HrxCQPvRcgXC4I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/356552-312a-44ce-8677-405505fc460e/1/TkB_fq2BapVV9HrxCQPvRcgXC4I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TkB_fq2BapVV9HrxCQPvRcgXC4I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:46:fd:1c:10:04:cb:c3:1f:58:f9:b9:17:43:82:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e407f7ead816a9555f47af10903ef45c8170b82
        Validity
            Not Before: Mar  2 02:00:59 2026 GMT
            Not After : Mar  3 02:00:59 2026 GMT
        Subject: CN=7ae7faae4faf1ad0751c232f596a314989b03c93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e3:90:a5:4f:2d:4d:45:5f:20:d9:84:21:e8:
                    1d:82:f1:f0:80:db:8f:d2:bb:ba:a5:b0:a0:cc:04:
                    74:5b:3d:ba:ff:d1:2a:2c:a5:a0:98:39:6d:bf:49:
                    e9:09:50:e2:02:bd:b7:bc:70:98:fa:4d:90:66:eb:
                    f6:f0:89:26:3d:9c:e1:85:eb:8f:0d:74:96:39:d0:
                    24:5d:36:b8:4d:ec:f5:d1:c7:05:83:d7:4f:60:75:
                    8b:e0:1e:20:ab:f9:9b:ba:a9:d3:f9:fc:64:fd:53:
                    cb:fb:4d:07:b2:79:e0:2a:db:85:21:26:fb:e8:99:
                    57:8d:3d:e8:3a:4a:1c:52:d4:6a:9f:3e:98:2d:a0:
                    6c:f5:ad:d5:85:31:c3:86:99:ed:ce:cf:54:4f:ce:
                    0c:c2:26:5a:84:23:ce:81:26:f4:82:6c:b6:22:c5:
                    78:35:c9:71:fb:b0:c0:f2:1f:34:d9:20:b6:b2:cd:
                    99:67:22:0f:57:4a:74:d8:e7:d6:18:da:05:3c:e2:
                    3e:bd:de:9d:22:fe:3b:8a:6d:11:6e:dc:b0:db:c8:
                    2a:d3:2b:38:fd:90:1f:12:76:95:04:01:61:df:5c:
                    e1:02:24:a7:e2:19:35:b5:30:96:36:1f:1c:76:07:
                    ec:9d:3d:14:6a:0c:92:11:3f:03:47:b4:b9:ee:a8:
                    ca:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E7:FA:AE:4F:AF:1A:D0:75:1C:23:2F:59:6A:31:49:89:B0:3C:93
            X509v3 Authority Key Identifier:
                keyid:4E:40:7F:7E:AD:81:6A:95:55:F4:7A:F1:09:03:EF:45:C8:17:0B:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkB_fq2BapVV9HrxCQPvRcgXC4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/356552-312a-44ce-8677-405505fc460e/1/TkB_fq2BapVV9HrxCQPvRcgXC4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/356552-312a-44ce-8677-405505fc460e/1/TkB_fq2BapVV9HrxCQPvRcgXC4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:11:4e:c0:fa:47:3c:5f:a6:2c:14:12:cb:03:25:e7:eb:28:
         37:f3:36:66:80:bc:74:a4:03:50:c0:d1:8b:fe:dd:a7:c6:59:
         4c:0f:2f:23:d7:ae:b6:a6:a0:79:3b:83:f6:45:a2:5d:4d:e2:
         8a:7b:ac:11:12:b0:28:01:86:bc:c3:c6:6b:1b:24:0d:84:53:
         dc:3c:9d:2e:e8:c6:1d:84:e2:94:bf:dc:9e:6d:e5:1d:ed:2a:
         93:c7:57:2a:5f:dd:61:c1:64:7a:4f:c4:1e:95:76:e9:52:78:
         0b:82:95:61:da:ab:09:be:8c:43:1a:9c:fe:16:a5:f6:a5:bf:
         f5:3c:f7:cd:20:3d:cc:be:65:ee:ee:e9:12:f8:55:03:d5:9c:
         50:6d:80:8a:73:5b:fd:c5:ea:d9:09:0d:62:08:9a:ed:62:12:
         d4:e0:3a:44:3f:36:53:47:0c:9c:ac:f4:b9:27:6c:30:9e:66:
         4b:2c:d6:30:f0:24:75:70:5f:f7:2f:50:d2:36:f1:25:2d:81:
         0b:2c:51:0d:26:b6:48:80:bf:8a:6c:82:80:8a:f7:ea:f3:40:
         86:b8:2f:88:34:16:e2:7b:ef:cc:f7:19:85:9b:08:b1:d7:91:
         0a:13:5a:ea:b2:d2:cd:cd:da:85:3b:49:fa:30:29:72:ad:db:
         f6:8b:1a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:31:28 2026 by rpki-client